Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/w6-hN364zZuOCBWmB5mSQp23KFs.roa
File: w6-hN364zZuOCBWmB5mSQp23KFs.roa (raw, json)
Hash identifier: cnqKmasoSmOpHceQ9ZT+BxCTxI+zPBtbm/A8i66dd6U=
Subject key identifier: C3:AF:A1:37:7E:B8:CD:9B:8E:08:15:A6:07:99:92:42:9D:B7:28:5B
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01962204F37B093AEC3CCB9A413B0FCC739D
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/w6-hN364zZuOCBWmB5mSQp23KFs.roa
Signing time: Thu 10 Apr 2025 23:24:31 +0000
ROA not before: Thu 10 Apr 2025 23:24:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 14.102.226.0/23 maxlen: 24
77.111.96.0/22 maxlen: 22
77.111.102.0/23 maxlen: 24
94.229.212.0/24 maxlen: 24
94.229.220.0/24 maxlen: 24
94.229.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:22:04:f3:7b:09:3a:ec:3c:cb:9a:41:3b:0f:cc:73:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Apr 10 23:24:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3afa1377eb8cd9b8e0815a6079992429db7285b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dd:b5:43:1f:1c:8d:e1:02:e9:88:bc:9d:1f:
9c:c4:ee:30:50:0d:24:82:44:d3:4b:27:2e:8e:04:
ec:0d:bd:b8:3d:29:3a:09:35:71:88:f3:9b:26:cd:
e2:9a:7d:ba:d8:8c:3e:b4:e5:ea:27:88:ab:e1:75:
28:04:35:73:75:7d:25:ad:0d:3d:ed:bf:61:54:57:
9c:51:64:60:33:8f:9d:ad:2c:b4:6a:09:fd:22:09:
31:3c:9a:b3:de:05:11:1d:18:de:ee:b7:ef:43:06:
84:f4:cd:1d:00:2e:91:2b:75:96:83:35:bb:17:64:
04:fd:c3:cf:d3:5d:d9:9b:a4:2f:dc:a6:57:31:17:
bf:e5:d8:4b:d9:63:a7:d7:ec:8f:4d:52:7f:a1:05:
e4:d0:01:bd:a7:74:8c:30:38:08:e6:bd:eb:0b:ce:
4a:83:24:72:42:09:b5:6e:6c:e8:f3:49:aa:ee:6a:
42:1a:06:ec:ef:49:8d:be:97:4d:99:f4:4a:e9:66:
38:f3:60:8f:4d:a8:4f:4d:bd:ca:0a:44:4c:d1:45:
ad:de:13:e3:ef:24:6c:88:8e:85:aa:d1:16:2f:79:
69:92:23:a6:45:fa:f9:bc:09:42:22:45:1c:29:4c:
20:a6:78:09:89:97:99:d1:22:22:c1:e6:3d:7c:3b:
b7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AF:A1:37:7E:B8:CD:9B:8E:08:15:A6:07:99:92:42:9D:B7:28:5B
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/w6-hN364zZuOCBWmB5mSQp23KFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.226.0/23
77.111.96.0/22
77.111.102.0/23
94.229.212.0/24
94.229.220.0/24
94.229.223.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:57:4e:f7:0f:93:a9:c1:32:fc:b0:2d:46:c8:d4:de:68:95:
fd:ba:a4:0a:68:e5:6a:9d:1c:79:e7:07:19:a0:e2:0f:5b:33:
2e:4d:bc:68:11:27:db:2d:cb:3c:8f:02:92:6c:b1:b7:16:35:
da:f5:2b:63:bc:89:ce:43:e9:62:6f:70:f3:c8:c9:38:57:a9:
44:35:f1:05:85:b6:61:7c:61:11:27:40:7c:67:3c:c7:bf:5c:
7b:9d:56:24:2f:27:5a:4f:ee:fd:36:e0:49:a7:a4:91:c0:41:
29:71:23:6b:ea:c5:aa:f4:b2:64:54:4a:d9:af:52:f8:b1:e8:
59:d9:a9:cd:74:fa:71:de:0a:53:18:e3:16:63:fb:2c:90:19:
e4:6a:a1:7a:0f:a6:88:4c:af:4e:cf:c7:11:a0:4d:56:f5:50:
67:8b:17:55:39:83:79:50:5b:1e:73:df:88:3f:13:24:81:db:
0e:ab:c4:bd:27:dd:ea:1e:fe:2d:51:5d:b9:01:bf:1a:8b:80:
5c:ea:b5:4a:6a:c5:29:44:cd:d8:d0:1e:ea:1b:15:ad:86:3b:
76:5e:bd:73:c8:00:64:1f:73:8f:bf:1a:96:f9:da:5d:fd:6a:
3e:d9:13:cf:07:4f:63:58:cb:79:cd:26:e5:41:e1:0c:68:e8:
44:48:be:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:41 2025 by rpki-client on console.sobornost.net